Financial privacy

What we do with your financial information.

The notice federal law requires us to give you under the Gramm-Leach-Bliley Act, delivered when you open an account and annually after that.

Why

Financial companies choose how they share your personal information. Federal law gives you the right to limit some but not all sharing.

What

Account balances and transaction history, income and payroll records, and the contents of documents you upload.

How

We share only to run the app — with our aggregation provider and our service providers. We do not sell your information.

The part that matters

There is currently nothing here you need to limit.

We do not share your nonpublic personal information with nonaffiliated third parties for their own purposes, so the federal opt-out has nothing to act on today. If that ever changes, we will send you a new notice with opt-out instructions before it starts.

Last updated 23 September 2026

This page states the substance, not the federal model form. The model form carries a safe harbor only if reproduced exactly as prescribed, including its rows, format and typography, and the drafting note says to confirm that approach before publishing. Counsel should settle the form — and confirm in writing that Mochi Finance is a “financial institution” under the GLBA at all — before this is relied on.

NOIR Holdings, Inc. [ confirm exact registered name ], doing business as Mochi Finance.

What we collect

We collect nonpublic personal information about you in connection with providing the app, including: account balances and transaction history; account and routing identifiers; income and payroll records; identity information held by your financial institution; and the contents of statements, tax forms, pay stubs and other documents you choose to upload. We never receive or store your banking credentials — those are entered inside Plaid’s own flow.

Reasons we share, and whether you can limit it

For our everyday business purposes
We share · You cannot limit

To connect your accounts through our aggregation provider, run the app, maintain your account, prevent fraud, respond to legal process and comply with law.

For our marketing purposes
We do not share

We do not use your financial information to market to you through third parties.

For joint marketing with other financial companies
We do not share

We have no joint marketing arrangements.

For our affiliates’ purposes
We do not share

[ We have no affiliates — confirm. ]

For nonaffiliates to market to you
We do not share

This is the sharing federal law would let you limit. We do not do it.

To sell or license your information
We do not share

We do not sell, license or rent your information to anyone, including companies that train artificial intelligence models.

Your right to limit sharing

Federal law gives you the right to limit our sharing of nonpublic personal information about you with nonaffiliated third parties for purposes other than our everyday business purposes.

We do not currently share your nonpublic personal information in any way you have the right to limit, so there is nothing to opt out of today.

Mochi Finance plans to offer an optional program under which you could choose, document by document, to let us license documents you upload to third parties. Deliveries under that program would be a disclosure you could limit. Before it starts we will send you an updated notice with opt-out instructions, and no document would ever be included without your separate, per-upload consent. See Section 4 of the Privacy Policy.

If sharing you can limit ever begins and you direct us to limit it, we will stop going forward. We will not close your account or deny you the app because you exercised the right, and your election stays in effect until you change it.

How we protect your information

We maintain a written information security program with administrative, technical and physical safeguards appropriate to our size, the nature of our activities and the sensitivity of the information we hold, as required by the FTC Safeguards Rule. That includes encryption of data at rest and in transit, multi-factor authentication on internal access to customer information, separation of connected account data from uploaded documents, and access logging.

When you get this notice

We deliver this notice when you open an account and annually thereafter for as long as you remain a customer. We will also send an updated notice before any change to the sharing described above takes effect.

Questions

Email shay@mochifinance.com, or write to NOIR Holdings, Inc., [ postal address ], [ phone ]. To exercise a privacy right, use the privacy request form.